Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

I needed Claude Code as a network service for my pipelines. So I built one.

Claude Code is genuinely impressive as an interactive coding agent. But I kept running into the same wall: I wanted to use it from CI/CD pipelines, webhook automations, and security scanners — things that talk HTTP, not TTY. Anthropic p…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Claude Code is genuinely impressive as an interactive coding agent. But I kept running into the same wall: I wanted to use it from CI/CD pipelines, webhook automations, and security scanners — things that talk HTTP, not TTY.



Anthropic provides the Agent SDK, which is the right tool when you're embedding Claude Code into a single script. But once you need multiple clients hitting it over the network — different pipelines, different teams, each with their own API keys and workspaces — the SDK alone isn't enough. You need a service layer on top.



So I built one.






What it does



Claude Code API Server is a Python (FastAPI) service that wraps the Claude Agent SDK and exposes it as a REST API. The workflow is simple:




# 1. Upload your codebase as a ZIP
curl -X POST /v1/uploads -F "[email protected]"

# 2. Submit a job
curl -X POST /v1/jobs -d '{"upload_id": "...", "prompt": "Find security vulnerabilities"}'

# 3. Poll for results
curl /v1/jobs/{job_id}
# → status, Claude's analysis, any files it created (base64-encoded)






That's it. Fire and forget — give it a clear job, get back a complete result.






Why security was the starting point



There are projects that wrap Claude Code for network access. My concern was a step further: what happens when a malicious prompt lands in the system? A compromised CI pipeline, a rogue webhook, a prompt injection buried in a repository — the moment you expose an AI agent to the network, you have to assume this will happen. I wanted a service that treats every incoming job as potentially hostile and limits the blast radius.



Process-level sandboxing. Every job runs in a bwrap namespace with seccomp filtering. Isolated filesystem, isolated process tree — a hostile prompt can't read other jobs' data or poke around the host.



Network isolation. Per-client security profiles control what the sandbox can reach — allowlisted domains, blocked IP ranges, or full network cutoff. A prompt can't phone home if there's nowhere to call.



Separate auth layer. Server-side API keys (Argon2-hashed), completely independent from Anthropic tokens. Revoke a client without touching anyone's credentials. Cost tracking is per-client, so you always know who spent what.



Minimal footprint. No Redis, no Postgres, no message queue. One container, file-based state. Fewer components, smaller attack surface.



It also supports MCP servers and custom subagents if you need to extend Claude's capabilities — all managed through an admin API.






What it's not



This is a tool for teams, not a platform for planet-scale SaaS. No streaming, no horizontal scaling, no clustering. It comfortably handles tens of jobs per day — if you need more, scale vertically or run multiple instances.






Why I'm sharing this



I built it for my own workflows — mostly automated security reviews of merge requests. It's early (v0.1), but it works and I use it daily. I figured if it's useful to me, maybe someone else will find it useful too.



I'd genuinely love to hear what you think. Feedback, ideas on where to take it, use cases I haven't thought of, or even harsh criticism — all welcome. That's how good tools get better.



GitHub: claude-code-api-server

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
Syntax validiert (0 Fehler)
title: Detect Exploitation - I needed Claude Code as a network service for my pipelines. So I built one.
id: d6f9a1b3-bac5-4b14-8eaf-471e2899b08b
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "I needed Claude Code as a netw" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("I needed Claude Code as a network servic")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*I needed Claude Code as a network servic*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "I needed Claude Code as a network servic"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich I needed Claude Code as a network servic.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I needed Claude Code as a network service for my pipelines. So I built one.

Thematisch verwandte Begriffe: needed, Claude, Code, network · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-88003 | InvoicePlane is a self-hosted open source application for managing invoi…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag